| Quellcodebibliothek Statistik Leitseite products/Sources/formale Sprachen/Java/Openjdk/test/jdk/sun/security/pkcs11/ec/ (Sun/Oracle ©) Datei vom 13.11.2022 mit Größe 13 kB |
|
Quelle TestECDSA.java Sprache: JAVA |
|||||||||||||||
|
/* * Copyright (c) 2006, 2020, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ /* * @test * @bug 6405536 8042967 * @summary basic test of SHA1withECDSA and NONEwithECDSA signing/verifying * @author Andreas Sterbenz * @library /test/lib .. * @library ../../../../java/security/testlibrary * @key randomness * @modules jdk.crypto.cryptoki * @run main/othervm TestECDSA * @run main/othervm -Djava.security.manager=allow TestECDSA sm policy */ import java.security.KeyFactory; import java.security.KeyPair; import java.security.KeyPairGenerator; import java.security.MessageDigest; import java.security.PrivateKey; import java.security.Provider; import java.security.PublicKey; import java.security.Signature; import java.security.interfaces.ECPublicKey; import java.security.spec.PKCS8EncodedKeySpec; import java.security.spec.X509EncodedKeySpec; import java.util.Random; public class TestECDSA extends PKCS11Test { // values of the keys we use for the tests // keypair using NIST P-192 private final static String pub192 = "30:49:30:13:06:07:2a:86:48:ce:3d:02:01:06:08:2a:86:48:ce:3d:03:01:01:03:32:00:0 private final static String priv192 = "30:39:02:01:00:30:13:06:07:2a:86:48:ce:3d:02:01:06:08:2a:86:48:ce:3d:03:01:01:0 // keypair using NIST B-163 private final static String pub163 = "30:40:30:10:06:07:2a:86:48:ce:3d:02:01:06:05:2b:81:04:00:0f:03:2c:00:04:04:af:b private final static String priv163 = "30:33:02:01:00:30:10:06:07:2a:86:48:ce:3d:02:01:06:05:2b:81:04:00:0f:04:1c:30:1 // keypair using NIST P-521 private final static String pub521 = "30:81:9b:30:10:06:07:2a:86:48:ce:3d:02:01:06:05:2b:81:04:00:23:03:81:86:00:04:0 private final static String priv521 = "30:60:02:01:00:30:10:06:07:2a:86:48:ce:3d:02:01:06:05:2b:81:04:00:23:04:49:30:4 // keypair using NIST K-571 private final static String pub571 = "30:81:a7:30:10:06:07:2a:86:48:ce:3d:02:01:06:05:2b:81:04:00:26:03:81:92:00:04:0 private final static String priv571 = "30:65:02:01:00:30:10:06:07:2a:86:48:ce:3d:02:01:06:05:2b:81:04:00:26:04:4e:30:4 // data for test 1, original and SHA-1 hashed private final static byte[] data1Raw = b("0102030405060708090a0b0c0d0e0f10111213"); private final static byte[] data1SHA = b("00:e2:5f:c9:1c:8f:d6:8c:6a:dc:c6:bd:f0:46:60 // valid signatures of data1. private final static byte[] sig192 = b("30:35:02:19:00:91:ba:19:b2:01:da:ce:77:ed:08:6 private final static byte[] sig163 = b("30:2d:02:15:02:8d:aa:95:06:f4:4f:fa:44:59:ec:4 private final static byte[] sig521 = b("30:81:87:02:42:01:32:a5:be:dd:fb:c3:07:66:01:4 private final static byte[] sig571 = b("30:81:94:02:48:01:4b:81:77:93:cf:bc:98:26:4c:0 // data for test 2 (invalid signatures) private final static byte[] data2Raw = {}; private final static byte[] data2SHA = b("da:39:a3:ee:5e:6b:4b:0d:32:55:bf:ef:95:60:18 private static void verify(Provider provider, String alg, PublicKey key, byte[] data, byte[] sig, boolean result) throws Exception { Signature s = Signature.getInstance(alg, provider); s.initVerify(key); boolean r; s.update(data); r = s.verify(sig); if (r != result) { throw new Exception("Result mismatch, actual: " + r); } s.update(data); r = s.verify(sig); if (r != result) { throw new Exception("Result mismatch, actual: " + r); } System.out.println("Passed"); } private static void sign(Provider provider, String alg, PrivateKey key, byte[] data) throws Signature s = Signature.getInstance(alg, provider); s.initSign(key); s.update(data); byte[] sig = s.sign(); System.out.println(toString(sig)); } public static void main(String[] args) throws Exception { main(new TestECDSA(), args); } @Override protected boolean skipTest(Provider provider) { if (provider.getService("Signature", "SHA1withECDSA") == null) { System.out.println("ECDSA not supported, skipping"); return true; } if (isBadNSSVersion(provider)) { return true; } return false; } @Override public void main(Provider provider) throws Exception { long start = System.currentTimeMillis(); /* * PKCS11Test.main will remove this provider if needed */ Providers.setAt(provider, 1); if (false) { KeyPairGenerator kpg = KeyPairGenerator.getInstance("EC", provider); kpg.initialize(571); KeyPair kp = kpg.generateKeyPair(); PrivateKey priv = kp.getPrivate(); ECPublicKey pub = (ECPublicKey)kp.getPublic(); System.out.println("Keys for " + pub.getParams()); System.out.println("public key:"); System.out.println(toString(pub.getEncoded())); System.out.println("private key:"); System.out.println(toString(priv.getEncoded())); return; } if (getSupportedECParameterSpec("secp192r1", provider).isPresent()) { test(provider, pub192, priv192, sig192); } if (getSupportedECParameterSpec("sect163r1", provider).isPresent()) { test(provider, pub163, priv163, sig163); } if (getSupportedECParameterSpec("sect571r1", provider).isPresent()) { test(provider, pub571, priv571, sig571); } test(provider, pub521, priv521, sig521); long stop = System.currentTimeMillis(); System.out.println("All tests passed (" + (stop - start) + " ms)."); } private void test(Provider provider, String pub, String priv, byte[] sig) throws Exception { KeyFactory kf = KeyFactory.getInstance("EC", provider); X509EncodedKeySpec pubSpec = new X509EncodedKeySpec(parse(pub)); PKCS8EncodedKeySpec privSpec = new PKCS8EncodedKeySpec(parse(priv)); PrivateKey privateKey = kf.generatePrivate(privSpec); PublicKey publicKey = kf.generatePublic(pubSpec); if (false) { sign(provider, "SHA1withECDSA", privateKey, data1Raw); // sign(provider, "NONEwithECDSA", privateKey, data1SHA); return; } // verify known-good and known-bad signatures using SHA1withECDSA and NONEwithECDSA verify(provider, "SHA1withECDSA", publicKey, data1Raw, sig, true); verify(provider, "SHA1withECDSA", publicKey, data2Raw, sig, false); verify(provider, "NONEwithECDSA", publicKey, data1SHA, sig, true); verify(provider, "NONEwithECDSA", publicKey, data2SHA, sig, false); System.out.println("Testing with default signature format: ASN.1"); testSigning(provider, privateKey, publicKey, false); System.out.println("Testing with IEEE P1363 signature format"); testSigning(provider, privateKey, publicKey, true); } private void testSigning(Provider provider, PrivateKey privateKey, PublicKey publicKey, boolean p1363Format) throws Exception { byte[] data = new byte[2048]; new Random().nextBytes(data); // sign random data using SHA1withECDSA and verify using // SHA1withECDSA and NONEwithECDSA Signature s; if (p1363Format) { s = Signature.getInstance("SHA1withECDSAinP1363Format", provider); } else { s = Signature.getInstance("SHA1withECDSA", provider); } s.initSign(privateKey); s.update(data); byte[] s1 = s.sign(); s.initVerify(publicKey); s.update(data); if (!s.verify(s1)) { throw new Exception("Sign/verify 1 failed"); } if (p1363Format) { s = Signature.getInstance("NONEwithECDSAinP1363Format", provider); } else { s = Signature.getInstance("NONEwithECDSA", provider); } MessageDigest md = MessageDigest.getInstance("SHA-1"); byte[] digest = md.digest(data); s.initVerify(publicKey); s.update(digest); if (!s.verify(s1)) { throw new Exception("Sign/verify 2 failed"); } // sign random data using NONEwithECDSA and verify using // SHA1withECDSA and NONEwithECDSA s.initSign(privateKey); s.update(digest); byte[] s2 = s.sign(); s.initVerify(publicKey); s.update(digest); if (!s.verify(s2)) { throw new Exception("Sign/verify 3 failed"); } if (p1363Format) { s = Signature.getInstance("SHA1withECDSAinP1363Format", provider); } else { s = Signature.getInstance("SHA1withECDSA", provider); } s.initVerify(publicKey); s.update(data); if (!s.verify(s2)) { throw new Exception("Sign/verify 4 failed"); } /* // XXX session release bug in P11Signature // test behavior if data of incorrect length is passed s = Signature.getInstance("NONEwithECDSA", provider); s.initSign(privateKey); s.update(new byte[8]); s.update(new byte[640]); try { s.sign(); throw new Exception("No error NONEwithECDSA signing long data"); } catch (SignatureException e) { System.out.println("OK: " + e); } System.out.println("sign/verify test ok"); /**/ } private static byte[] b(String s) { return parse(s); } }
¤ Dauer der Verarbeitung: 0.16 Sekunden (vorverarbeitet) ¤*© Formatika GbR, Deutschland |
|
||||||||||||||
2026-04-02